CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
Attackers can exploit symbolic links in FIPS mode to mount sensitive host directories into containers, bypassing isolation and reading critical host files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-9341?
CVE-2024-9341 is a medium-severity path traversal vulnerability in Redhat Enterprise Linux, published on 1 Oct 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
Weakness: CWE-59
Which versions are affected by CVE-2024-9341?
3 open source packages ship an affected version, including github.com/containers/common. It affects 3 products.
| Package | Affected | Fixed in |
|---|---|---|
github.com/containers/common Go | All versions | 0.60.4 |
github.com/containers/common Go | All versions | 0.60.4 |
github.com/containers/common Go | All versions | 0.60.4 |
Linux distribution packages (12)
cri-o Red Hat:openshift:4.14::el8 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el8 |
cri-o-debuginfo Red Hat:openshift:4.14::el8 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el8 |
cri-o-debugsource Red Hat:openshift:4.14::el8 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el8 |
cri-o Red Hat:openshift:4.14::el9 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el9 |
cri-o-debuginfo Red Hat:openshift:4.14::el9 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el9 |
cri-o-debugsource Red Hat:openshift:4.14::el9 | All versions | 0:1.27.8-10.rhaos4.14.git807f92c.el9 |
cri-o Red Hat:openshift:4.17::el8 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el8 |
cri-o-debuginfo Red Hat:openshift:4.17::el8 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el8 |
cri-o-debugsource Red Hat:openshift:4.17::el8 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el8 |
cri-o Red Hat:openshift:4.17::el9 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el9 |
cri-o-debuginfo Red Hat:openshift:4.17::el9 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el9 |
cri-o-debugsource Red Hat:openshift:4.17::el9 | All versions | 0:1.30.6-3.rhaos4.17.git49b5172.el9 |
Products include Containers Common, Redhat Enterprise Linux, Redhat Openshift Container Platform.
How do I fix CVE-2024-9341?
Upgrade github.com/containers/common to 0.60.4 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-9341 being exploited?
There is no known exploitation of CVE-2024-9341 in the wild and no public exploit code.
Sources
Also known as AZL-50058, AZL-50070, AZL-50091, AZL-50103, AZL-95502, BELL-CVE-2024-9341 and 9 more.